Heroku-22 and Heroku-24 stacks updated

Change effective on 24 September 2025

We updated the heroku-22 and heroku-24 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

Changelog of packages

Stack: heroku-22

  • Updated bind9-dnsutils from version 1:9.18.30-0ubuntu0.22.04.2 to 1:9.18.39-0ubuntu0.22.04.1
  • Updated bind9-host from version 1:9.18.30-0ubuntu0.22.04.2 to 1:9.18.39-0ubuntu0.22.04.1
  • Updated bind9-libs from version 1:9.18.30-0ubuntu0.22.04.2 to 1:9.18.39-0ubuntu0.22.04.1
  • Updated dnsutils from version 1:9.18.30-0ubuntu0.22.04.2 to 1:9.18.39-0ubuntu0.22.04.1
  • Updated libc-bin from version 2.35-0ubuntu3.10 to 2.35-0ubuntu3.11
  • Updated libc-dev-bin from version 2.35-0ubuntu3.10 to 2.35-0ubuntu3.11
  • Updated libc6 from version 2.35-0ubuntu3.10 to 2.35-0ubuntu3.11
  • Updated libc6-dev from version 2.35-0ubuntu3.10 to 2.35-0ubuntu3.11
  • Updated libcups2 from version 2.4.1op1-1ubuntu4.11 to 2.4.1op1-1ubuntu4.12
  • Updated libmysqlclient21 from version 8.0.43-0ubuntu0.22.04.1 to 8.0.43-0ubuntu0.22.04.2
  • Updated libopenjp2-7 from version 2.4.0-6ubuntu0.3 to 2.4.0-6ubuntu0.4
  • Updated libxml2 from version 2.9.13+dfsg-1ubuntu0.8 to 2.9.13+dfsg-1ubuntu0.9
  • Updated linux-libc-dev from version 5.15.0-153.163 to 5.15.0-156.166
  • Updated locales from version 2.35-0ubuntu3.10 to 2.35-0ubuntu3.11

Updates to packages available at build time only

  • Updated libmysqlclient-dev from version 8.0.43-0ubuntu0.22.04.1 to 8.0.43-0ubuntu0.22.04.2
  • Updated libopenjp2-7-dev from version 2.4.0-6ubuntu0.3 to 2.4.0-6ubuntu0.4
  • Updated libxml2-dev from version 2.9.13+dfsg-1ubuntu0.8 to 2.9.13+dfsg-1ubuntu0.9

Stack: heroku-24

  • Updated bind9-dnsutils from version 1:9.18.30-0ubuntu0.24.04.2 to 1:9.18.39-0ubuntu0.24.04.1
  • Updated bind9-host from version 1:9.18.30-0ubuntu0.24.04.2 to 1:9.18.39-0ubuntu0.24.04.1
  • Updated bind9-libs from version 1:9.18.30-0ubuntu0.24.04.2 to 1:9.18.39-0ubuntu0.24.04.1
  • Updated coreutils from version 9.4-3ubuntu6 to 9.4-3ubuntu6.1
  • Updated dpkg from version 1.22.6ubuntu6.1 to 1.22.6ubuntu6.2
  • Updated libc-bin from version 2.39-0ubuntu8.5 to 2.39-0ubuntu8.6
  • Updated libc6 from version 2.39-0ubuntu8.5 to 2.39-0ubuntu8.6
  • Updated libcups2t64 from version 2.4.7-1.2ubuntu7.3 to 2.4.7-1.2ubuntu7.4
  • Updated libmysqlclient21 from version 8.0.43-0ubuntu0.24.04.1 to 8.0.43-0ubuntu0.24.04.2
  • Updated libopenjp2-7 from version 2.5.0-2ubuntu0.3 to 2.5.0-2ubuntu0.4
  • Updated libpam-modules from version 1.5.3-5ubuntu5.4 to 1.5.3-5ubuntu5.5
  • Updated libpam-modules-bin from version 1.5.3-5ubuntu5.4 to 1.5.3-5ubuntu5.5
  • Updated libpam-runtime from version 1.5.3-5ubuntu5.4 to 1.5.3-5ubuntu5.5
  • Updated libpam0g from version 1.5.3-5ubuntu5.4 to 1.5.3-5ubuntu5.5
  • Updated libsqlite3-0 from version 3.45.1-1ubuntu2.4 to 3.45.1-1ubuntu2.5
  • Updated libxml2 from version 2.9.14+dfsg-1.3ubuntu3.4 to 2.9.14+dfsg-1.3ubuntu3.5
  • Updated locales from version 2.39-0ubuntu8.5 to 2.39-0ubuntu8.6
  • Updated openssh-client from version 1:9.6p1-3ubuntu13.13 to 1:9.6p1-3ubuntu13.14
  • Updated openssh-server from version 1:9.6p1-3ubuntu13.13 to 1:9.6p1-3ubuntu13.14
  • Updated openssh-sftp-server from version 1:9.6p1-3ubuntu13.13 to 1:9.6p1-3ubuntu13.14

Updates to packages available at build time only

  • Updated dpkg-dev from version 1.22.6ubuntu6.1 to 1.22.6ubuntu6.2
  • Updated libc-dev-bin from version 2.39-0ubuntu8.5 to 2.39-0ubuntu8.6
  • Updated libc6-dev from version 2.39-0ubuntu8.5 to 2.39-0ubuntu8.6
  • Updated libdpkg-perl from version 1.22.6ubuntu6.1 to 1.22.6ubuntu6.2
  • Updated libmysqlclient-dev from version 8.0.43-0ubuntu0.24.04.1 to 8.0.43-0ubuntu0.24.04.2
  • Updated libopenjp2-7-dev from version 2.5.0-2ubuntu0.3 to 2.5.0-2ubuntu0.4
  • Updated libxml2-dev from version 2.9.14+dfsg-1.3ubuntu3.4 to 2.9.14+dfsg-1.3ubuntu3.5
  • Updated linux-libc-dev from version 6.8.0-79.79 to 6.8.0-84.84